Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QqoGCHFPmC1LuARvVKh3n0Q_gkg.roa
File: QqoGCHFPmC1LuARvVKh3n0Q_gkg.roa (raw, json)
Hash identifier: XGCB1/DHCtz7/oOh5qg5R2yBPThfr4GialntmSieN8Y=
Subject key identifier: 42:AA:06:08:71:4F:98:2D:4B:B8:04:6F:54:A8:77:9F:44:3F:82:48
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1325
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QqoGCHFPmC1LuARvVKh3n0Q_gkg.roa
Signing time: Wed 29 Sep 2021 02:55:25 +0000
ROA not before: Wed 29 Sep 2021 02:55:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4901 (0x1325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=42AA0608714F982D4BB8046F54A8779F443F8248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:e1:91:16:e6:09:3d:e7:cc:2a:36:97:e5:
29:e0:83:4a:a9:d8:10:6f:f7:d0:ad:36:ba:9e:1b:
bf:bf:1b:4d:c8:7f:e8:2c:75:5e:6e:a7:2f:ea:3d:
e5:4b:ef:89:6d:36:6d:b9:cb:e6:e6:aa:01:f4:31:
d8:14:62:d1:3a:46:07:d0:d0:58:eb:c5:08:74:1d:
ea:1f:a3:72:d8:d8:10:7f:89:db:79:80:85:73:04:
d7:46:d3:ca:9f:b3:b9:9a:41:ac:7d:60:0d:e0:21:
00:a1:a6:3c:49:86:d8:e6:a3:ca:57:26:a0:f2:0d:
e0:7c:88:c4:80:27:c9:ef:a3:a3:ef:8b:4b:9e:28:
68:df:b1:07:d2:41:dc:8a:9f:4b:9e:46:d3:95:8f:
02:b1:4d:d5:3b:20:96:20:65:7f:cf:2a:c2:26:20:
ce:18:9d:04:14:98:a7:53:fa:7c:7e:53:9f:cd:60:
47:00:b2:29:88:75:bd:33:a9:ea:3c:82:f1:88:d2:
ce:04:44:f9:ab:56:66:17:9a:3f:f8:cc:0c:7c:cb:
04:38:c2:c1:7e:bf:ba:20:f9:8e:12:17:91:63:7f:
ea:92:ad:7b:e7:eb:2b:ce:7c:77:89:b9:7d:39:c1:
38:a8:70:59:2c:6a:12:ba:4c:00:f7:d3:58:9c:ce:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:06:08:71:4F:98:2D:4B:B8:04:6F:54:A8:77:9F:44:3F:82:48
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QqoGCHFPmC1LuARvVKh3n0Q_gkg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:de:66:47:d7:63:09:0f:cb:ff:30:d4:81:51:ac:37:00:ec:
b7:7a:48:17:af:a7:88:a4:5e:2f:be:89:73:3e:87:6e:da:45:
64:94:6b:57:d6:e3:28:5b:2a:4b:37:1f:30:df:38:60:bf:48:
29:02:13:aa:77:90:68:34:31:3e:86:78:92:ab:06:59:cc:c0:
27:67:df:0d:3e:a1:4e:0b:c7:8a:f6:fb:b6:ae:97:b2:0c:e9:
bf:c9:4f:26:18:30:11:ea:ce:39:47:f9:b6:4b:bf:e5:e4:f7:
80:6f:64:40:8b:2b:7d:46:eb:9b:c2:98:e4:60:19:ce:d8:bb:
46:28:63:0a:74:e6:ca:31:b8:2d:b7:c4:14:4d:76:50:91:c3:
80:26:22:55:fe:c8:32:3c:f2:24:5d:97:22:9a:d3:90:f8:b6:
6f:20:11:0a:0f:fc:b0:7b:2f:0c:be:80:e3:56:f0:69:82:f2:
48:a0:4c:65:b0:d0:5a:59:a4:2b:b1:1c:69:d1:0b:0a:e4:d3:
9e:18:8e:43:55:2c:5f:e1:98:a2:8b:97:1e:56:b7:01:89:2e:
10:58:ce:26:6c:15:cc:91:1d:50:32:0b:47:7b:a2:de:2c:c6:
85:a3:d4:16:f9:de:49:54:8a:5d:00:79:92:b2:a0:87:bb:dd:
48:65:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org